Install Dee from the installation guide, then approve access in your browser. The default installation places the CLI at ~/.dee/bin/dee; these examples use that path directly. The CLI detects supported local agents, links the Dee skill, configures optional MCP tools, and keeps its own credential private in ~/.dee. Skill + CLI works without MCP. The connection works under your Dee account’s current permissions.
The examples below use https://dee.cool. The CLI remembers the selected service address. Check your connection before continuing; revoke it when it is no longer needed.
Connect and check access
~/.dee/bin/dee agent connect
~/.dee/bin/dee agent status
The CLI can call declared HTTP operations by operation ID. This example sends a complete personal document through stdin and returns its actual document and revision IDs. The CLI creates and records the operation ID before sending the request.
Use the returned document_id in the read command. Your title and Markdown are separate fields; an H1 in the content does not replace the title. A document keeps the same URL when its content changes.
Discover operation names and inspect the shipped field definitions without making a network request. JSON output preserves the API response shape. The CLI’s generic write command handles supported business operations; browser sign-in exchange and browser logout use their dedicated protocols.
~/.dee/bin/dee api read get_document --path id=DOCUMENT_ID --json
Explore operations and schemas
~/.dee/bin/dee api list --json
~/.dee/bin/dee api schemas --json
~/.dee/bin/dee api schema SaveDocumentRequest --references --json
Use the right credential for the right entry.
External HTTP clients use Authorization: Bearer with an opaque Dee credential obtained through browser approval. This is distinct from the identity provider’s token. The same Dee Bearer can access ordinary restricted business endpoints and the document MCP, subject to current account, role, and lifecycle checks.
A custom client generates two independent secrets: a device secret and the future Dee credential, each 32 random bytes encoded as unpadded base64url. It sends the device secret and SHA-256 credential digest to /agent/login/start, opens the returned verification URL for the person, and polls using the original device secret. Approval activates the credential that the client already retained; polling never returns its plaintext. These fields are documented in the runtime protocol reference below.
The approval request lasts ten minutes. An ordinary human-account connection lasts no longer than the approving browser session or thirty days. An independent Agent Service connection uses its own Agent identity and persists until revoked; see the Agent Service guide. Automatic renewal and generic remote-MCP OAuth discovery are not currently provided. A denied, expired, or invalid request needs a new approval request.
External requests
Send only the Dee Bearer, without a Cookie header. Origin may be omitted; if supplied, it must equal the application origin. An optional X-Dee-Expected-Account-Id pins the original account and returns 409 AccountChanged if it differs.
Browser requests
The application uses its HttpOnly Dee Cookie. Cookie mutations require the exact application Origin. Agent connection listing and revocation require the browser Cookie and reject Authorization headers. Google sign-in uses a one-time, browser-bound authorization-code callback; account resolution and browser logout keep their dedicated Cookie and Origin protocols.
Direct HTTP
The example below is for a custom client that has completed the browser-approved flow and retained its own credential in DEE_TOKEN. CLI users can use dee api read and dee api call without extracting any private CLI state.
Inspect your approved HTTP connection
DEE_ORIGIN='https://api.dee.cool'
# DEE_TOKEN is retained privately by your approved custom client.
curl --fail-with-body "$DEE_ORIGIN/api/session" \
-H "Authorization: Bearer $DEE_TOKEN"
Save deliberately and recover the original result.
JSON business requests use snake_case fields and Content-Type: application/json. Success returns the declared object directly, without a universal success or data wrapper. IDs encode an unsigned 128-bit value using the exact Base62 alphabet ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789, left-padded with A to 22 characters. Arbitrary 22-character strings can overflow. Reuse returned IDs; for a new operation encode 16 random bytes with that alphabet.
A direct HTTP document save submits the complete title and Markdown with expected_revision_id from the version you read. Space, access, and attention writes use their own expected_revision; message maintenance uses expected_version; Trash and restoration use the complete reviewed management token. These conditions are distinct and are checked before a new change is committed.
When the response is lost, retain the original operation_id, target, conditions, complete input, and original upload bytes. Query the matching operation receipt or resend the identical request. A different valid intent under the same ID returns OperationConflict. A missing receipt does not prove an in-flight request never committed; an old receipt does not prove current content or access.
A 409 conflict requires reading the relevant current facts and deciding how to continue. A changed or merged intent uses a new operation ID. The CLI records direct document operation metadata and receipts without a local body copy; retrying a direct write requires the original input. Full local recovery is an explicit CLI option.
Document receipts
GET /api/documents/operations/{operation_id} checks original creation and save results. Lifecycle results use /api/documents/lifecycle/operations/{operation_id}.
Other write receipts
Spaces, access, communication, attention, and resource uploads each expose their own operation lookup. Their exact paths and response fields appear in the generated reference.
Current permission
Read requires current document access; new content writes require editor or administrator permission. Some management operations require an administrator. Reading an original minimal receipt does not grant access to current or historical content.
Collections use page_index, page_size, and order_by. The index starts at zero and defaults to 0; size defaults to 50 and accepts 0 through 100. A zero size returns empty items and total_pages=0 while retaining the true total_items. Responses contain items, page_index, page_size, total_pages, and total_items, with authorization applied before counting.
Encode ordering as one comma-separated query value, such as title.asc,id.asc. Each endpoint declares its supported columns and default order. Invalid columns, duplicate fields, or invalid directions are rejected; the service adds an ID tie-breaker when needed. The current page_index upper bound is 9007199254740991 and the computed offset must also fit the server’s range.
Message pagination can return read_boundary_message_id. Reuse that boundary with the same document, main-discussion or thread scope, ordering, and page size to keep later pages within the original message collection. The boundary is not the last item on the page and does not mark messages as read.
Change feeds use a separate opaque cursor. A request without a cursor returns a bootstrap fence; read current facts and then poll from that fence. Preserve complete batch cursors after consuming the batch. Change positions, revisions, and versions are decimal strings and must remain lossless. ChangeCursorInvalid returns resync_required, reset_cursor, and current_urls for rebuilding the current view.
Change polling accepts max_events from 1 to 200, default 100, and wait_ms from 0 to 25000, default 0. Bootstrap is immediate. Current identity, scope access, and document lifecycle are rechecked; a cursor does not preserve revoked access.
Documents, discussions, resources, and personal follow-up share the same current access rules while keeping their own identities and write conditions. A direct grant to one Space document does not grant Space membership or access to the Space’s collection.
Personal documents begin with their owner; Space documents use current membership and direct access sources. Effective roles combine applicable grants. Closing link joining blocks new joins but retains access that was already granted.
Documents and versions
Title and Markdown save together. Titles allow up to 1000 Unicode characters; Markdown allows up to 1,000,000 UTF-8 bytes. Both reject NUL. Exact saved versions remain subject to current document access.
Messages, threads, and quotes
Send ordered content parts and complete mentions. A thread uses its root message ID. Quoted ranges are UTF-8 byte half-open intervals, not JavaScript string indexes; message quotes include the version read. Ordinary reads and messages do not confirm a person’s read progress.
Resource originals
Upload raw bytes with the declared MIME and filename query, not multipart or base64 JSON. Originals are limited to 20 MiB. Upload reservation, confirmed upload, and publication are distinct states. Reading metadata or original bytes always checks current resource and document access.
Follow-up and Trash
Message read progress, follow/mute preferences, and notification confirmation are separate personal states. Administrators review a current management token before Trash or restoration. Restoration preserves the document identity and saved content, applies current grants, and closes link joining.
Interpret errors and tool results accurately.
HTTP errors use name, message, and data. Branch on HTTP status and the stable name; message is explanatory text. Validation may include data.fields with JSON Pointer locations. The x-request-id header identifies the request for diagnosis. Restricted /api/ responses, including errors and resource content, use Cache-Control: no-store.
401 means the current identity cannot be used. 403 can mean an invalid Origin or insufficient permission; unavailable and inaccessible targets generally share 404. A currently accessible document in Trash returns 410 for ordinary content. 409 identifies a particular version, management, cursor, or original-operation conflict. 503 means availability or confirmation failed; retain the original request before deciding to retry. The reference lists declared responses; shared authentication, recovery readiness, and request extraction can produce additional runtime failures.
MCP uses the same saved documents and current permissions. The local connector serves JSON-RPC over stdio; the HTTP document endpoint is /mcp. Initialize with protocolVersion 2025-11-25, capabilities, and clientInfo, then discover actual tools through tools/list. HTTP MCP requires an opaque Dee Bearer; a browser Cookie cannot substitute.
Tool success returns structuredContent and may include a resource_link with the real document URL. Domain failures return result.isError=true; malformed JSON, invalid requests, and invalid parameters use JSON-RPC errors. Valid notifications have no JSON-RPC reply; HTTP returns 202 with an empty body. The stdio adapter also exposes list_operations for interrupted local writes. Reading through a tool does not mark a person’s discussions as read.
The HTTP operation and model reference below is generated from the current OpenAPI declaration. Browser approval and MCP runtime protocols are listed separately because they are not yet part of that declaration. Missing OpenAPI security schemes do not make restricted endpoints public.
Example HTTP error shape
{
"name": "RevisionConflict",
"message": "The document changed since the version you read.",
"data": { "current_revision_id": "RETURNED_REVISION_ID" }
}
API reference
142 HTTP operations from the current OpenAPI contract, plus 2 supplemental runtime protocols. Expand an endpoint for its parameters, request body, responses, and model links.
No endpoints match. Try a method, path, or operation ID.
Accounts and sessions
Inspect the current account, handle browser sign-in, and resolve registered collaborators.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Parameters
Name
Location
Requirement and schema
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Responses
200 All sign-in methods belonging to this browser account; provider subjects are never exposed
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Parameters
Name
Location
Requirement and schema
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
409 The last sign-in method cannot be removed, or the session changed AccountChanged: current Cookie belongs to another account; no actor-scoped action was performed.
Registered-account lookup uses the browser Cookie and exact application Origin. A Dee Bearer alone does not replace this protocol.
Parameters
Name
Location
Requirement and schema
Origin
header
Optional
Required and equal to APP_ORIGIN when using a Cookie session
View schema
{
"type": [
"string",
"null"
]
}
Cookie
header
Optional
Current Dee browser session, or use an approved Agent Bearer credential
View schema
{
"type": [
"string",
"null"
]
}
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Public endpoint; readiness or recovery conditions can still affect availability.
Parameters
Name
Location
Requirement and schema
return_to
query
Optional
Same-origin relative return target
View schema
{
"type": "string"
}
Responses
200 Configured sign-in providers, default provider and validated navigation target; enabled is true when any provider is available. Grants no document access.
Begin Google sign-in with the exact application Origin. The backend binds its one-time callback to this browser and creates a Dee session after Google verification.
Google redirect callback: no existing Dee session, Dee Bearer, or Origin header is required. The backend verifies the one-time state and the browser’s dee_google_login Cookie, then returns a 303 redirect. Successful callbacks establish the Dee session; failures return a fixed safe error to sign-in.
Parameters
Name
Location
Requirement and schema
code
query
Optional
Single-use Google authorization code
View schema
{
"type": "string"
}
state
query
Optional
State from the browser-bound login
View schema
{
"type": "string"
}
error
query
Optional
Google authorization failure
View schema
{
"type": "string"
}
Responses
303 Sign-in establishes a Dee HttpOnly session and returns to the validated application path. Explicit linking requires the initiating browser session, preserves its cookie, and returns with login_identity=linked or login_identity_error=conflict|session_changed|google_link_failed. Failed sign-in returns to /sign-in with a fixed error code. Only matched browser binding retains the original target; unmatched callbacks use /app.
Location
APP_ORIGIN plus a validated return target, or /sign-in?error=google_login_failedView schema
{
"type": "string"
}
Set-Cookie
New Dee session only for sign-in; linking preserves it. Always clears the one-time Google login cookie.View schema
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Parameters
Name
Location
Requirement and schema
Cookie
header
Required
Current Dee v0.1 session cookie
View schema
{
"type": "string"
}
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Login-synchronized account and currently valid Dee session; no document grant
Browser session logout: Cookie and exact application Origin, with the optional original-session condition. Use POST /agent/logout for an external connection.
204 Cookie-derived Dee session is durably revoked. Conditional requests confirm only a matching original SID, including an already-revoked row, and leave browser cookies unchanged to preserve newer logins. Unconditional requests also succeed for absent credentials.
Set-Cookie
Only an unconditional request clears the Dee v0.1 cookieView schema
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Comma-separated updated_at,created_at,title,readers_30d,last_viewed_at,favorited_at,pinned_at,id with asc/desc; mine/space updated views default to pinned_at.desc,updated_at.desc,id.asc; other defaults use the view timestamp descending,id.asc
View schema
{
"type": "string"
}
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Current authorized summaries and counts from one snapshot
Current browser user, ordinary human-account connector, or independent Agent Bearer. An Agent uses X-Dee-Expected-Agent-Id and current scope permissions; actual document writes additionally require the approved plan or bound-memory authorization. Browser mutations require the exact application Origin.
Parameters
Name
Location
Requirement and schema
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current browser user, ordinary human-account connector, or independent Agent Bearer. An Agent uses X-Dee-Expected-Agent-Id and current scope permissions; actual document writes additionally require the approved plan or bound-memory authorization. Browser mutations require the exact application Origin.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Only the actor's original result, without private content or current access
Current browser user, ordinary human-account connector, or independent Agent Bearer. An Agent uses X-Dee-Expected-Agent-Id and current scope permissions; actual document writes additionally require the approved plan or bound-memory authorization. Browser mutations require the exact application Origin.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Current authorized Markdown, metadata, safe HTML and TOC
Current browser user, ordinary human-account connector, or independent Agent Bearer. An Agent uses X-Dee-Expected-Agent-Id and current scope permissions; actual document writes additionally require the approved plan or bound-memory authorization. Browser mutations require the exact application Origin.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Authorized metadata without body or rendered content
Current browser user, ordinary human-account connector, or independent Agent Bearer. An Agent uses X-Dee-Expected-Agent-Id and current scope permissions; actual document writes additionally require the approved plan or bound-memory authorization. Browser mutations require the exact application Origin.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Immutable snapshot under current document permission
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Explicit actual opening retained for the current account; does not mark discussion messages read
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Current membership-filtered Space page and count
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Parameters
Name
Location
Requirement and schema
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Only the original actor's retained write fact; not current Space access
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Member page, available only to Space members; minimum registered profiles
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Only this actor's original committed fact, independent of current document access
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Current actor's effective document role and independent sources
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Direct collaborators and their effective sources, document administrator only
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
409 Access revision, operation or last administrator conflict AccountChanged: current Cookie belongs to another account; no actor-scoped action was performed.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
409 Access revision, operation or last administrator conflict AccountChanged: current Cookie belongs to another account; no actor-scoped action was performed.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Current link rule and access revision, document administrator only
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Request body Required
Raw file bytes, 1 byte to 20 MiB. Use a concrete Content-Type, default application/octet-stream when omitted or empty. PNG/JPEG/GIF/WebP retain matching raster-signature checks; other file types download as attachments.
*/*View schema
{
"type": "string",
"format": "binary"
}
application/octet-streamView schema
{
"type": "string",
"format": "binary"
}
image/gifView schema
{
"type": "string",
"format": "binary"
}
image/jpegView schema
{
"type": "string",
"format": "binary"
}
image/pngView schema
{
"type": "string",
"format": "binary"
}
image/webpView schema
{
"type": "string",
"format": "binary"
}
Responses
201 Confirmed private upload; content is not yet published
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Actor-only reservation or confirmed result; no current access grant
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Verified private original bytes; PNG/JPEG/GIF/WebP inline, every other MIME type as an attachment with a UTF-8 filename
Current browser user, ordinary human-account connector, or independent Agent Bearer. An Agent uses X-Dee-Expected-Agent-Id and current scope permissions; actual document writes additionally require the approved plan or bound-memory authorization. Browser mutations require the exact application Origin.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Actor-only minimal original receipt; no current content or access
Current browser user, ordinary human-account connector, or independent Agent Bearer. An Agent uses X-Dee-Expected-Agent-Id and current scope permissions; actual document writes additionally require the approved plan or bound-memory authorization. Browser mutations require the exact application Origin.
created_at or id with asc/desc; default created_at.asc,id.asc
View schema
{
"type": "string"
}
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Messages and current authorized counts from one snapshot
409 New entry shape requires the common entry read_url AccountChanged: current Cookie belongs to another account; no actor-scoped action was performed.
Current browser user, ordinary human-account connector, or independent Agent Bearer. An Agent uses X-Dee-Expected-Agent-Id and current scope permissions; actual document writes additionally require the approved plan or bound-memory authorization. Browser mutations require the exact application Origin.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current browser user, ordinary human-account connector, or independent Agent Bearer. An Agent uses X-Dee-Expected-Agent-Id and current scope permissions; actual document writes additionally require the approved plan or bound-memory authorization. Browser mutations require the exact application Origin.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Currently authorized message or deletion placeholder
409 New entry shape requires the common entry read_url AccountChanged: current Cookie belongs to another account; no actor-scoped action was performed.
Current browser user, ordinary human-account connector, or independent Agent Bearer. An Agent uses X-Dee-Expected-Agent-Id and current scope permissions; actual document writes additionally require the approved plan or bound-memory authorization. Browser mutations require the exact application Origin.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current browser user, ordinary human-account connector, or independent Agent Bearer. An Agent uses X-Dee-Expected-Agent-Id and current scope permissions; actual document writes additionally require the approved plan or bound-memory authorization. Browser mutations require the exact application Origin.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current browser user, ordinary human-account connector, or independent Agent Bearer. An Agent uses X-Dee-Expected-Agent-Id and current scope permissions; actual document writes additionally require the approved plan or bound-memory authorization. Browser mutations require the exact application Origin.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Stable-ID context in the message's actual main/Thread range
409 New entry shape requires the common entry read_url AccountChanged: current Cookie belongs to another account; no actor-scoped action was performed.
Current browser user, ordinary human-account connector, or independent Agent Bearer. An Agent uses X-Dee-Expected-Agent-Id and current scope permissions; actual document writes additionally require the approved plan or bound-memory authorization. Browser mutations require the exact application Origin.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Root, retained reply count and most recent reply time
409 New entry shape requires the common entry read_url AccountChanged: current Cookie belongs to another account; no actor-scoped action was performed.
Independent Agent opaque Bearer with X-Dee-Expected-Agent-Id. No browser Cookie. The authenticated Agent, current scope, resource permissions, and work conditions determine access.
Include typed activities using a separately bound cursor; default false
View schema
{
"type": "boolean"
}
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Include typed activities using a separately bound cursor; default false
View schema
{
"type": "boolean"
}
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 This account's personal document and tree changes
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Include typed activities using a separately bound cursor; default false
View schema
{
"type": "boolean"
}
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Ordered committed identities under current access, or bootstrap boundary
409 Invalid cursor; explicit reset boundary and current reads required AccountChanged: current Cookie belongs to another account; no actor-scoped action was performed.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Include typed activities using a separately bound cursor; default false
View schema
{
"type": "boolean"
}
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Space and its document changes under current membership
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Currently readable followed Threads; no read or follow mutation
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Receiver-only notifications under current document access
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Current receiver-owned source metadata or deletion placeholder
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Actor-only original minimal result; no current content access
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Parameters
Name
Location
Requirement and schema
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Receiver-only counts after current access filtering
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Main reading state and current authorized unread counts; no mutation
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 The current account's document favorite; no reading side effects
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Thread preferences and independent reply read state
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Parameters
Name
Location
Requirement and schema
space_id
query
Optional
Optional current member Space; omission aggregates all readable sources
Same document ordering fields; default favorited_at.desc,id.asc
View schema
{
"type": "string"
}
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Only the actor's original lifecycle result, no current permission
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Current administrator metadata and filtered counts, without contents or tokens
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Current administrator metadata and comparison token without common content
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current browser Cookie and exact application Origin. Only the personal owner or Space administrator may approve an independent Agent connection. An opaque Bearer cannot approve a connection. X-Dee-Expected-Account-Id pins the human.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Parameters
Name
Location
Requirement and schema
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Only this actor's original minimal initialization or related-document receipt
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Current readable Agent document associations and management qualification
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
201 New ordinary document and association committed together; purpose also fills the empty Configuration binding group atomically, retaining initial document markers
409 Original operation input conflict, configuration revision conflict, or built-in already bound AccountChanged: current Cookie belongs to another account; no actor-scoped action was performed.
Current browser Dee session Cookie only. Authorization headers, including opaque Dee Bearers, are rejected. This read does not require an Origin header. The optional X-Dee-Expected-Account-Id pins the current account.
Comma-separated id, authorized_at or last_used_at with .asc/.desc; default authorized_at.desc,id.asc
View schema
{
"type": "string"
}
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. The current browser Dee session Cookie remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Responses
200 Current account's safe Agent connection metadata; browser session required
Current browser Dee session Cookie only. Authorization headers, including opaque Dee Bearers, are rejected. Revocation requires the exact application Origin. The optional X-Dee-Expected-Account-Id pins the current account.
Parameters
Name
Location
Requirement and schema
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. The current browser Dee session Cookie remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
409 Connection generation unavailable; reload the list AccountChanged: current Cookie belongs to another account; no actor-scoped action was performed.
Current browser Dee session Cookie only. Authorization headers, including opaque Dee Bearers, are rejected. Revocation requires the exact application Origin. The optional X-Dee-Expected-Account-Id pins the current account.
Original Dee account ID. The current browser Dee session Cookie remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Responses
204 Owned client revoked; already-revoked owned connections are idempotent
Independent Agent opaque Bearer with X-Dee-Expected-Agent-Id. No browser Cookie. The authenticated Agent, current scope, resource permissions, and work conditions determine access.
Parameters
Name
Location
Requirement and schema
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Independent Agent opaque Bearer with X-Dee-Expected-Agent-Id. No browser Cookie. The authenticated Agent, current scope, resource permissions, and work conditions determine access.
Parameters
Name
Location
Requirement and schema
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current authorized browser user or independent Agent Bearer. Bind the original actor with X-Dee-Expected-Account-Id or X-Dee-Expected-Agent-Id respectively. A read is current evidence, not cached authority to execute.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Real browser Dee session only. Current owner/Space administrator manages Agent settings and connections; current document permissions govern decisions and control. Browser mutations require the exact application Origin and X-Dee-Expected-Account-Id pins the human. A tool or service Bearer cannot replace the browser confirmation.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Real browser Dee session only. Current owner/Space administrator manages Agent settings and connections; current document permissions govern decisions and control. Browser mutations require the exact application Origin and X-Dee-Expected-Account-Id pins the human. A tool or service Bearer cannot replace the browser confirmation.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Real browser Dee session only. Current owner/Space administrator manages Agent settings and connections; current document permissions govern decisions and control. Browser mutations require the exact application Origin and X-Dee-Expected-Account-Id pins the human. A tool or service Bearer cannot replace the browser confirmation.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Real browser Dee session only. Current owner/Space administrator manages Agent settings and connections; current document permissions govern decisions and control. Browser mutations require the exact application Origin and X-Dee-Expected-Account-Id pins the human. A tool or service Bearer cannot replace the browser confirmation.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Real browser Dee session only. Current owner/Space administrator manages Agent settings and connections; current document permissions govern decisions and control. Browser mutations require the exact application Origin and X-Dee-Expected-Account-Id pins the human. A tool or service Bearer cannot replace the browser confirmation.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Independent Agent opaque Bearer with X-Dee-Expected-Agent-Id. No browser Cookie. The authenticated Agent, current scope, resource permissions, and work conditions determine access.
Parameters
Name
Location
Requirement and schema
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current authorized browser user or independent Agent Bearer. Bind the original actor with X-Dee-Expected-Account-Id or X-Dee-Expected-Agent-Id respectively. A read is current evidence, not cached authority to execute.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Independent Agent opaque Bearer with X-Dee-Expected-Agent-Id. No browser Cookie. The authenticated Agent, current scope, resource permissions, and work conditions determine access.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current authorized browser user or independent Agent Bearer. Bind the original actor with X-Dee-Expected-Account-Id or X-Dee-Expected-Agent-Id respectively. A read is current evidence, not cached authority to execute.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Real browser Dee session only. Current owner/Space administrator manages Agent settings and connections; current document permissions govern decisions and control. Browser mutations require the exact application Origin and X-Dee-Expected-Account-Id pins the human. A tool or service Bearer cannot replace the browser confirmation.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current authorized browser user or independent Agent Bearer. Bind the original actor with X-Dee-Expected-Account-Id or X-Dee-Expected-Agent-Id respectively. A read is current evidence, not cached authority to execute.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Current work control; active does not mean running
Real browser Dee session only. Current owner/Space administrator manages Agent settings and connections; current document permissions govern decisions and control. Browser mutations require the exact application Origin and X-Dee-Expected-Account-Id pins the human. A tool or service Bearer cannot replace the browser confirmation.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current authorized browser user or independent Agent Bearer. Bind the original actor with X-Dee-Expected-Account-Id or X-Dee-Expected-Agent-Id respectively. A read is current evidence, not cached authority to execute.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Independent Agent opaque Bearer with X-Dee-Expected-Agent-Id. No browser Cookie. The authenticated Agent, current scope, resource permissions, and work conditions determine access.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 This actor's minimal original pin result; grants no current document access
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Origin-owned pin state and current permission, without reading side effects
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 This account's active document nodes and structure version
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Only this actor's original minimal placement receipt
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Active document nodes and structure version in one Space-member snapshot
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
source_created_at/source_id/resource_id with .asc/.desc; unique source/resource ties are appended
View schema
{
"type": "string"
}
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Selected attachment references and object-level sources under current document access
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Current visible incoming document relationships
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Current visible outgoing document relationships
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Current authorized revision metadata and current identity from one snapshot
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Complete immutable comparison or an explicit work/output budget result
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current browser user, ordinary human-account connector, or independent Agent Bearer. An Agent uses X-Dee-Expected-Agent-Id and current scope permissions; actual document writes additionally require the approved plan or bound-memory authorization. Browser mutations require the exact application Origin.
Parameters
Name
Location
Requirement and schema
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Parameters
Name
Location
Requirement and schema
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Only the authenticated human actor's original minimal Task receipt; does not grant current target access
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 Current authorized source, Task fields, three condition identities and newest activity
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
created_at or id, comma-separated asc/desc; default created_at.desc,id.asc
View schema
{
"type": "string"
}
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
X-Dee-Expected-Agent-Id
header
Optional
Required for independent Agent requests; omitted for human requests. Send the original Agent ID with the Agent connection Bearer; a different Agent returns 409 AgentChanged. Do not combine with X-Dee-Expected-Account-Id.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
View schema
{
"type": "string"
}
Responses
200 One currently authorized Task's activity in an authorized count/page snapshot; each handoff note is bounded to 8192 UTF-8 bytes
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Current human-account connector Bearer, or the browser Dee session. Independent Agent Service access is limited to its documented Phase 1 subset. Cookie mutations require the exact application Origin. Bearer requests must omit Cookie; any supplied Origin must match the application. Current resource permissions apply.
Parameters
Name
Location
Requirement and schema
X-Dee-Expected-Account-Id
header
Optional
Original Dee account ID. Current Dee Cookie or human-authorized native-client Bearer remains the credential; another account returns 409 AccountChanged before reading or writing actor-scoped facts. Same-account new sessions remain compatible.
View schema
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}
Authorization
header
Optional
Bearer opaque Dee credential from agent browser authorization. Browser requests continue to use the current Cookie and Origin.
Full schemas preserve required fields, nullable values, enums, formats, and constraints. Models prefixed by Agent or MCP may belong to the supplemental runtime protocols described above.
A UUID with one case-sensitive, fixed-width text representation.
Ordering compares the underlying UUID, independently of its text alphabet.
{
"type": "string",
"description": "A UUID with one case-sensitive, fixed-width text representation.\nOrdering compares the underlying UUID, independently of its text alphabet.",
"pattern": "^[A-Za-z0-9]{22}$"
}